<wstrust:RequestSecurityToken>
   <wstrust:TokenType>SAML</TokenType>
   <wstrust:RequestType>ReqExchange</RequestType>
   <wstrust:OnBehalfOf>
      <ws:BinarySecurityToken id="originaltoken" ValueType="X.509>
            sdfOIDFKLSoidefsdflk ...
      </ws:BinarySecurityToken>
   </wstrust:OnBehalfOf>
</wstrust:RequestSecurityToken>
